Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier: 0Wh6nJUQwQPMMpdrPwPKrabiVSWce/CM6nMdUKmKtoI=
Subject key identifier: E4:4A:63:8A:0E:E0:AA:91:B0:4F:91:B6:3E:C6:5B:7F:23:D2:5B:D9
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial: 019D39AEAA5F697179146EE2B55CF0707165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 13:00:41 +0000
Manifest this update: Sun 29 Mar 2026 13:00:41 +0000
Manifest next update: Mon 30 Mar 2026 13:00:41 +0000
Files and hashes: 1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: KboQJsfBkRwBOHfefIl5zHWNrKNsaGJ/cH1Cp1DQF5A=)
2: Ds44zfxwoX0zZ-7ulrX3xVDM_S4.roa (hash: m7dxG9EvyLpUsK5NhHcjeFergHlbX9Ot5AbzRhpjiiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:aa:5f:69:71:79:14:6e:e2:b5:5c:f0:70:71:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Validity
Not Before: Mar 29 13:00:41 2026 GMT
Not After : Mar 30 13:00:41 2026 GMT
Subject: CN=e44a638a0ee0aa91b04f91b63ec65b7f23d25bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:0c:ab:22:f2:9c:a0:53:3d:8f:9f:e8:d0:
e0:42:32:91:7c:cd:c9:d4:bc:e1:03:1e:96:7a:64:
c3:8e:48:9d:ca:3a:2f:9a:9e:3e:92:65:70:47:06:
1d:bc:60:3c:1e:c2:0a:a4:8a:59:61:46:6f:5c:af:
4f:d0:f7:8f:e1:23:d8:c5:11:2b:8e:44:ae:92:91:
de:e5:00:b9:bf:1c:63:ea:ae:ea:4d:58:00:b3:97:
5d:9f:64:95:83:ab:cd:2e:b2:11:0d:57:21:7d:6a:
a7:da:ff:7a:03:3b:0f:a5:d9:a4:48:99:16:88:0a:
3b:9d:c0:b6:fb:5d:63:d8:15:22:9f:52:c2:d5:f9:
88:ce:77:97:ba:94:e4:58:3e:f4:26:de:70:51:06:
71:ef:78:98:55:30:fd:c5:4d:f4:d8:96:4a:02:1d:
8a:55:05:fb:83:f1:25:11:55:3c:90:62:fc:0e:f2:
96:c6:24:61:f7:2a:f1:96:85:ae:5a:2d:ca:22:e7:
37:f2:65:9a:49:24:1b:58:9a:30:0a:86:35:cc:c5:
83:eb:b6:e7:58:24:00:93:5e:da:29:ad:7f:17:4d:
07:1d:96:2b:56:6b:4a:ad:d3:14:23:a2:f5:c3:7c:
f3:bb:29:6f:ec:4b:07:b6:6d:ee:18:7a:17:fa:de:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:63:8A:0E:E0:AA:91:B0:4F:91:B6:3E:C6:5B:7F:23:D2:5B:D9
X509v3 Authority Key Identifier:
keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f4:7c:99:00:1d:cb:d0:b1:cc:12:3e:4b:32:be:68:47:62:
95:92:31:52:f5:7b:73:9e:bd:c7:dd:fd:9d:ce:6a:bf:9a:37:
5f:a1:7d:76:d3:80:5b:e4:31:d8:82:15:c3:52:a2:51:1c:13:
16:23:9b:9f:31:4e:da:b6:7c:e8:84:6e:ad:0f:2f:5e:f2:36:
9e:4c:72:fb:e8:73:5c:ee:5d:46:a1:0e:67:b9:6c:7f:45:28:
60:c2:28:64:a2:61:af:b5:cf:bb:9e:dd:63:88:5f:77:7c:84:
e1:13:7b:1d:f0:60:20:e9:ed:f5:6f:d4:66:4a:f8:ab:50:91:
e1:5c:a9:19:ab:f5:10:d4:f3:59:5b:aa:13:fb:36:a4:7d:d7:
6f:db:05:17:85:95:e0:0c:cc:ae:75:fa:4b:a0:ab:fa:26:57:
29:cf:0c:7b:38:84:b1:7e:7e:af:26:b8:b7:71:15:7e:68:62:
c8:37:81:66:86:b1:6a:4a:1c:07:46:8b:4e:cf:bd:62:a6:ad:
d5:e3:7d:5d:28:d7:d5:5b:69:af:7d:6b:5a:ba:10:a5:9e:c6:
b6:2c:08:fd:ce:f4:60:2d:c6:3f:20:3c:b2:4b:3e:a8:df:69:
41:d6:ad:bc:3a:47:2e:5e:96:ea:21:04:27:10:9f:56:88:3a:
1d:23:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:21 2026 by rpki-client